restricing port forwarding ports server-side

[Florian Weimer]

Vincent Danen <vdanen at linsec.ca> writes:

> I know the book is a little dated, but has anything like this
> appeared in openssh yet?

We've got a proof-of-concept implementation of global and per-user
port forwarding control.  We don't use it anymore, so the patches are
still against 3.4p1, and they aren't thoroughly tested.

<http://cert.uni-stuttgart.de/files/openssh/patches/>

-- 
Florian Weimer 	                  Weimer at CERT.Uni-Stuttgart.DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898